v0.59.1

Installation and signature verification

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.1/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.1/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.1/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.1/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com 

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

Installation of kapp-controller

kapp-controller can be installed by using kapp

kapp deploy -a kc -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.1/release.yml

or by using kubectl

kubectl deploy -f https://github.com/carvel-dev/kapp-controller/releases/download/v0.59.1/release.yml

Container Images

Kapp-controller and Kapp-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

• ghcr.io/carvel-dev/kapp-controller@sha256:366640afc68a791bb6e91d249c7b6c02de3695ef738a6fe9f8ed99ac65aefdb6
• ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:7cf9e176aac02bf8f355ccae379332a51ea35571121cd60271e345d7d9d75c22

Verify container image signature

The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying kapp-controller image
cosign verify ghcr.io/carvel-dev/kapp-controller@sha256:366640afc68a791bb6e91d249c7b6c02de3695ef738a6fe9f8ed99ac65aefdb6 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying kapp-controller-package-bundle image
cosign verify ghcr.io/carvel-dev/kapp-controller-package-bundle@sha256:7cf9e176aac02bf8f355ccae379332a51ea35571121cd60271e345d7d9d75c22 --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

✨ What's new

• Bump golang version and fix CVEs by @CodesbyUnnati in #1778
• Bump kapp, kbld, vendir, helm, cue-lang/cue dependencies by @dependabot[bot] in #1775

New Contributors

• @CodesbyUnnati made their first contribution in #1778

Full Changelog: v0.59.0...v0.59.1

📂 Files Checksum

281b31fc6ab5910af6414e85c95da5f73bdd6e6b9c890f179db6c790b4160c3a  ./release.yml
1c306be0cabd69b83efc4022ed9c57bd38c9abab4a9b3144def1796926f6def4  ./kctrl-darwin-amd64
0d32b880e37745d1fff2d92d2388054fb6c7aa96be0333f29c1c1e8db51458be  ./kctrl-darwin-arm64
3cf09ba4ea90e3b44de569ddacaeaa9b1cf930772dee67dbb2a4deefa3c187a8  ./kctrl-linux-amd64
efd2d439701ccbb63738d584f14509a234f8df94ab34c4700de2e27ce78a7bbd  ./kctrl-linux-arm64
bb8082b41e75c3907c8ebeecd09df83734cc1d4cbdcf76c82f590ccab0ff8d5a  ./kctrl-windows-amd64.exe
c6f73bf696d6d781add7172717670ed2acfe004945e383c94c901a2bc076a61b  ./package.yml
7a6aa35600459a1797a6f0564ae89954e6da035fe54e19b72c573f5b31938a8c  ./package-metadata.yml